Switching everyone to Pro tier, harmonizing configuration, using Terraform for future changes, restricting traffic only through Cloudflare, etc

Possibly waiting until ISO is in place.

SE will lead these exercises.

Possibly waiting until ISO/Security Engineer is here.

• Start with the attack tree exercise
• Work out low hanging fruit
• Go through recommendations etc.